Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C87AD6259FD1DD90542000B87F4A02206F6F97E.cer
File:                     2C87AD6259FD1DD90542000B87F4A02206F6F97E.cer (raw, json)
Hash identifier:          cii7BRc9nBi90NYFd0SA5KqqhQK4NLmfBjrY9fPffRw=
Subject key identifier:   2C:87:AD:62:59:FD:1D:D9:05:42:00:0B:87:F4:A0:22:06:F6:F9:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AEF7D457747222A4D225A41C404179DCEF26D76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/2C87AD6259FD1DD90542000B87F4A02206F6F97E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 14:28:31 +0000
Certificate not after:    Mon 16 Sep 2024 14:33:31 +0000
Subordinate resources:    AS: 270793
                          IP: 201.159.160.0/22
                          IP: 2804:7180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:7d:45:77:47:22:2a:4d:22:5a:41:c4:04:17:9d:ce:f2:6d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 14:28:31 2023 GMT
            Not After : Sep 16 14:33:31 2024 GMT
        Subject: CN=2C87AD6259FD1DD90542000B87F4A02206F6F97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:64:a6:de:e8:0a:58:23:51:6a:f4:bd:ab:
                    77:0b:f4:52:f1:90:5c:7d:78:e9:6d:2c:4b:fc:f3:
                    08:6b:13:c9:b2:da:a4:3e:73:17:77:14:f4:60:5f:
                    59:73:88:7a:b8:b0:36:dd:8e:2a:6f:f6:27:57:97:
                    b0:ce:8b:59:92:e1:84:26:2d:d9:a7:90:d0:3b:19:
                    96:62:29:6f:c6:0b:9f:e2:e9:9e:a4:d3:67:d0:c4:
                    9f:b9:64:a7:f3:6f:ed:31:b5:76:1e:44:1f:ef:5a:
                    15:6e:a0:82:76:ec:c2:18:99:57:bd:da:1c:53:49:
                    f6:5a:5e:7f:45:60:e2:af:3c:69:1b:1a:d8:8e:cc:
                    52:14:20:1b:2c:0f:4b:f5:a1:2c:0c:db:d4:5b:cd:
                    25:11:0a:16:b0:c2:73:6f:c2:bf:59:72:69:22:ce:
                    fd:18:c6:85:6e:db:24:3c:47:b6:5f:df:3f:21:93:
                    52:6e:b2:35:6f:4a:29:e3:6b:6e:53:26:ec:28:42:
                    27:8f:3b:fe:15:82:56:b3:3a:1e:18:31:e4:e1:d3:
                    b3:ff:77:b7:32:9b:56:2e:61:da:ef:61:23:e9:9d:
                    63:66:3d:f5:d3:c3:78:b1:7d:11:6f:4f:b2:66:47:
                    fa:ae:1b:23:96:08:d0:c0:ff:30:8f:7c:8a:de:62:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:87:AD:62:59:FD:1D:D9:05:42:00:0B:87:F4:A0:22:06:F6:F9:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/2C87AD6259FD1DD90542000B87F4A02206F6F97E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22
                IPv6:
                  2804:7180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270793

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:39:8e:c4:b2:b7:be:a1:3a:26:29:ec:24:0a:29:b9:d1:
         52:17:0e:87:a4:b4:7c:fb:10:1a:24:55:fb:19:69:f7:aa:e5:
         91:f0:41:54:35:78:54:da:d8:03:94:a3:21:d2:91:b1:50:7e:
         91:c9:ff:77:4b:77:51:e3:d6:ba:15:07:00:d8:e1:cc:c2:e7:
         2c:45:0c:05:df:75:bb:21:97:64:87:54:41:86:9f:bd:9d:5d:
         34:8a:a7:b5:cc:7b:31:30:70:38:41:b7:c7:51:7b:5b:b1:64:
         ea:89:ab:af:21:7b:0e:53:6c:6b:f4:e0:06:96:65:6e:44:72:
         0b:43:7f:d6:7b:a6:ba:1f:11:5f:4b:d7:8b:36:06:9d:cb:b7:
         5a:a2:fd:2b:f1:bc:ed:39:57:72:b4:c3:3d:8d:0e:b8:44:0b:
         88:1b:d3:f6:69:50:8c:38:49:c6:d4:a8:cc:ee:31:4e:b9:46:
         3b:36:19:6f:96:00:06:9d:06:35:27:68:0c:27:43:97:a2:2d:
         77:2d:92:56:1c:b9:33:2b:b1:12:53:2a:fc:08:76:0d:32:cd:
         21:44:64:92:b5:30:8b:47:37:3b:de:31:7f:be:43:03:3d:6e:
         72:ce:b5:96:4b:3a:71:6f:d2:5e:2c:eb:df:52:8e:a2:f1:55:
         0a:18:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org